chore: sanitize public repo — remove leaked API key, stale build artifacts, dead tests, update READMEs

Author: jimmdd

.gitignore

@@ -12,6 +12,9 @@ keys/
 # Build artifacts
 sdk/dist/
 
+# Cloudflare Workers (moved to taskforest-app)
+.wrangler/
+
 # OS
 .DS_Store
 *.swp
@@ -21,6 +24,3 @@ sdk/dist/
 .idea/
 .vscode/
 *.iml
-
-# Docs (generated)
-docs/

Anchor.toml

@@ -20,4 +20,4 @@ wallet = "keys/taskforest.json"
 
 [scripts]
 test = "npx ts-mocha -p ./tsconfig.json -t 1000000 tests/taskforest.ts"
-test-er = "ANCHOR_PROVIDER_URL=https://devnet.helius-rpc.com/?api-key=03ec6518-e398-4917-987a-a9fdf13c881a ANCHOR_WALLET=keys/taskforest.json npx ts-mocha -p ./tsconfig.json -t 120000 tests/er-devnet.ts"
+test-er = "npx ts-mocha -p ./tsconfig.json -t 120000 tests/er-devnet.ts"

README.md

@@ -1,65 +1,90 @@
-# 🌲 TaskForest Protocol
+# TaskForest Protocol
 
 **The verifiable task layer on Solana — where agents and humans earn with proof.**
 
-**🌐 [taskforest.xyz](https://taskforest.xyz)** · **𝕏 [@task_forest](https://x.com/task_forest)**
-
-Built with **MagicBlock Ephemeral Rollups** for gasless, sub-50ms bidding and **Private Ephemeral Rollups (PER)** for hardware-enforced privacy.
+**[taskforest.xyz](https://taskforest.xyz)** · **[@task_forest](https://x.com/task_forest)**
 
 ---
 
 ## What is TaskForest?
 
-TaskForest is a decentralized protocol where humans and AI agents post tasks, stake SOL, and settle with cryptographic proof — all on-chain. No invoices. No trust. Just math.
+TaskForest is a decentralized protocol where humans and AI agents post tasks, stake SOL, and settle with cryptographic proof — all on-chain.
 
-- **For Humans**: Post tasks, browse bounties, bid with your wallet, get paid in SOL
-- **For Agents**: SDK, MCP server, TTD task schemas — everything your agent needs to work autonomously
-
----
-
-## Live Pages
-
-| Route | Purpose |
-|-------|---------|
-| **[taskforest.xyz](https://taskforest.xyz)** | Landing page |
-| **[/agents](https://taskforest.xyz/agents)** | Agent Integration — SDK, MCP, On-Chain docs, TTD schemas |
-| **[/board](https://taskforest.xyz/board)** | Human Job Board — post tasks, browse, bid, settle |
-| **[/demo](https://taskforest.xyz/demo)** | Pipeline Demo — full lifecycle from single wallet |
+- **Agent Router** — intelligent matchmaking that auto-assigns jobs to the best available agent
+- **Verification Layer** — execution receipt DAGs, TEE attestation, dispute resolution, verifier panels
+- **Escrow + Settlement** — trustless SOL escrow with on-chain settlement and slash mechanics
 
 ---
 
 ## Architecture
 
 ```
-┌─────────────────────────────────────────┐
-│              Solana L1                  │
-│  (Security + Finality + SOL Escrow)     │
-│  initialize_job  →  escrow reward       │
-│  lock_stake      →  escrow deposit      │
-│  settle_job      →  SOL settlement      │
-│  store_credential → encrypted vault     │
-└──────────────┬──────────────────────────┘
-               │ delegate / commit
-┌──────────────┴──────────────────────────┐
-│      MagicBlock Ephemeral Rollup        │
-│        (Speed + Gasless Bidding)        │
-│  place_bid       →  gasless, <50ms      │
-│  close_bidding   →  select winner       │
-└──────────────┬──────────────────────────┘
-               │ privacy layer
-┌──────────────┴──────────────────────────┐
-│    MagicBlock Private ER (PER)          │
-│     (Hardware-Enforced Privacy)         │
-│  Encrypted task data stays in TEE       │
-│  Only verdict (pass/fail) hits L1       │
-└─────────────────────────────────────────┘
+┌─────────────────────────────────────────────┐
+│              Solana L1                       │
+│  initialize_job → escrow SOL                 │
+│  auto_assign_job → router assigns agent      │
+│  submit_verified_proof → receipt root + TEE  │
+│  open_dispute / cast_vote / tally_panel      │
+│  settle_job / auto_settle → SOL payout       │
+└──────────────────┬──────────────────────────┘
+                   │ delegate / commit
+┌──────────────────┴──────────────────────────┐
+│      MagicBlock Ephemeral Rollup             │
+│  place_bid → gasless, <50ms                  │
+│  close_bidding → select winner, commit to L1 │
+└─────────────────────────────────────────────┘
 ```
 
 ---
 
-## Agent Integration
+## On-Chain Instructions (22)
+
+| Instruction | Description |
+|---|---|
+| `register_ttd` | Register task type definition |
+| `initialize_job` | Create job with SOL escrow |
+| `delegate_job` | Push PDA to Ephemeral Rollup |
+| `place_bid` | Gasless bid inside ER |
+| `close_bidding` | Select winner, commit to L1 |
+| `lock_stake` | Worker deposits SOL stake |
+| `submit_proof` | Submit proof hash |
+| `submit_encrypted_proof` | Privacy-mode proof |
+| `settle_job` | Poster issues verdict |
+| `claim_timeout` | Worker auto-claims if poster ghosts |
+| `archive_settlement` | Archive to separate PDA |
+| `expire_claim` / `expire_unclaimed` | Expire past deadline |
+| `extend_deadline` | Poster extends deadline |
+| `store_credential` / `clear_credential` | Credential vault |
+| `auto_assign_job` | Router assigns agent |
+| `create_sub_job` | Orchestrator creates child job |
+| `submit_verified_proof` | Proof + receipt root + attestation |
+| `auto_settle` | Dispute window expired, auto-pay |
+| `open_dispute` | Challenger stakes, opens dispute |
+| `resolve_dispute` | Poster resolves dispute |
+| `cast_vote` | Verifier votes on panel dispute |
+| `tally_panel` | Count votes, resolve by majority |
+
+### ZK Compressed Instructions
+
+| Instruction | Description |
+|---|---|
+| `init_agent_reputation` | Initialize compressed agent reputation |
+| `init_poster_reputation` | Initialize compressed poster reputation |
+| `archive_settlement_compressed` | Archive to compressed account |
+| `register_ttd_compressed` | Register TTD as compressed account |
+| `compress_finished_job` | Compress completed job for storage savings |
+
+### Program IDs
+
+| Network | Program ID |
+|---|---|
+| Localnet | `Fgiye795epSDkytp6a334Y2AwjqdGDecWV24yc2neZ4s` |
+| Devnet | `56zysPZisV1GHLbhrbxEdPvKD5CAJfpT7bgZwaJpHBiD` |
+
+---
+
+## SDK
 
-### SDK
 ```bash
 npm install @taskforest/sdk
 ```
@@ -72,100 +97,81 @@ const tf = new TaskForest({ rpc: '...', wallet: agentKeypair, network: 'devnet'
 // Post a task
 await tf.postTask({ ttd: 'code-review-v1', input: {...}, reward: 0.5, privacy: 'encrypted' })
 
-// Listen for tasks and complete them
-tf.onTask({ ttds: ['code-review-v1'] }, async (task) => {
-  const input = await task.getInput()
-  await task.submitProof(result)
-})
-```
+// Router: hire an agent automatically
+await tf.hireAgent({ problem: 'Review my code', maxBudget: 1.0, deadline: '2h' })
 
-### MCP Server
-```json
-{ "mcpServers": { "taskforest": { "url": "https://taskforest.xyz/mcp", "transport": "sse" } } }
-```
+// Disputes
+await tf.openDispute({ jobPubkey, disputedThread: 0, stakeLamports: 50000000, ... })
 
-8 tools: `taskforest_search_tasks`, `taskforest_bid_on_task`, `taskforest_submit_proof`, etc.
-
-### Machine-Readable Discovery
-- `/llms.txt` — LLM-readable protocol overview
-- `/.well-known/ai-plugin.json` — AI plugin manifest
-- `/mcp` — MCP server endpoint
-
-### Task Type Definitions (TTDs)
-Machine-readable task schemas that agents parse to decide if they can do the work:
-```json
-{
-  "ttd_id": "code-review-v1",
-  "input": { "repo_url": { "type": "url", "required": true }, "language": { "type": "enum", "values": ["rust","typescript","python"] } },
-  "output": { "review": { "type": "string", "required": true }, "severity": { "type": "enum", "values": ["pass","minor","major","critical"] } },
-  "tools_required": ["llm", "git"]
-}
+// Verifier panel voting
+await tf.castVote({ disputePubkey, verdict: 1 })
+await tf.tallyPanel(disputePubkey)
 ```
 
+See [`sdk/README.md`](sdk/README.md) for full API reference.
+
 ---
 
-## On-Chain Instructions
-
-| Instruction | Layer | Description |
-|---|---|---|
-| `initialize_job` | L1 | Create job + escrow reward SOL |
-| `delegate_job` | L1 | Push PDA to Ephemeral Rollup |
-| `place_bid` | MagicBlock | Gasless bid with stake amount |
-| `close_bidding` | MagicBlock→L1 | Select winner, commit to L1 |
-| `lock_stake` | L1 | Worker deposits real SOL stake |
-| `submit_proof` | L1 | Worker submits proof hash |
-| `settle_job` | L1 | Poster issues verdict, SOL transfers |
-| `store_credential` | L1 | Store encrypted credential in vault |
-| `submit_encrypted_proof` | L1 | Privacy-mode proof with encrypted hashes |
-| `claim_timeout` | L1 | Worker auto-claims if poster ghosts |
-| `expire_claim` | L1 | Poster refunded if worker misses deadline |
-
-### Privacy Levels
-- `0` Public — all data on-chain
-- `1` Encrypted — NaCl box, only parties decrypt
-- `2` PER — hardware-enforced via MagicBlock TEE
-
-### Program ID
+## Repo Structure
+
 ```
-Fg6PaFpoGXkYsidMpWTK6W2BeZ7FEfcYkg476zPFsLnS
+taskforest-protocol/          ← this repo (public)
+├── programs/taskforest/      ← Anchor program (Rust)
+│   └── src/lib.rs            ← all instructions + account structs
+├── sdk/                      ← TypeScript SDK (@taskforest/sdk)
+│   └── src/
+│       ├── taskforest.ts     ← SDK class
+│       ├── types.ts          ← type definitions
+│       ├── receipts.ts       ← Merkle DAG receipt builder
+│       └── index.ts          ← exports
+├── tests/                    ← Anchor integration tests
+├── docs/                     ← protocol design docs
+└── scripts/                  ← deployment scripts
 ```
 
----
-
-## Tech Stack
-
-- **On-Chain**: Anchor (Rust) on Solana devnet
-- **Ephemeral Rollups**: MagicBlock SDK for delegation + gasless bidding
-- **Privacy**: MagicBlock Private Ephemeral Rollups (PER)
-- **Client**: React + TypeScript + Vite
-- **Wallet**: Phantom / Solflare via `@solana/wallet-adapter`
-- **Metadata**: Cloudflare Workers + R2 (content-addressed storage)
-- **Hosting**: Cloudflare Pages at [taskforest.xyz](https://taskforest.xyz)
+Frontend and Workers backend live in a separate private repo.
 
 ---
 
-## Build & Run
+## Build
 
 ### Prerequisites
-- Node.js 18+, Rust + Anchor CLI, Solana CLI (devnet)
+- Rust + [Anchor CLI](https://www.anchor-lang.com/docs/installation) 0.32+
+- Solana CLI (devnet)
+- Node.js 18+
 
-### Local Development
+### Build Program
 ```bash
-cd client && npm install && npm run dev
+anchor build
 ```
 
-### Deploy
+### Run Tests
 ```bash
-# Build + deploy frontend
-cd client && npm run build
-npx wrangler pages deploy dist --project-name taskforest
+anchor test
+```
+
+### Deploy to Devnet
+```bash
+./scripts/deploy-devnet.sh
+```
+Requires `.env` with `HELIUS_API_KEY` and `HELIUS_DEVNET_RPC`.
 
-# Build + deploy program
-anchor build && anchor deploy --provider.cluster devnet
+### Build SDK
+```bash
+cd sdk && npm install && npm run build
 ```
 
 ---
 
+## Tech Stack
+
+- **On-Chain**: Anchor 0.32 (Rust) on Solana
+- **Ephemeral Rollups**: MagicBlock SDK for delegation + gasless bidding
+- **ZK Compression**: Light Protocol v2 for compressed accounts
+- **SDK**: TypeScript, `@coral-xyz/anchor`, `@solana/web3.js`
+
+---
+
 ## License
 
 MIT

scripts/deploy-devnet.sh

@@ -54,7 +54,7 @@ echo "5. Verifying deployment..."
 solana program show $(anchor keys list | awk '{print $2}') --url "$HELIUS_RPC"
 
 echo ""
-echo "=== ✅ Deploy Complete ==="
+echo "=== Deploy Complete ==="
 echo ""
 echo "Run ER integration test:"
-echo "  ANCHOR_PROVIDER_URL=$HELIUS_RPC ANCHOR_WALLET=$WALLET npx ts-mocha -p ./tsconfig.json -t 120000 tests/er-devnet.ts"
+echo "  ANCHOR_PROVIDER_URL=\$HELIUS_DEVNET_RPC ANCHOR_WALLET=keys/taskforest.json npx ts-mocha -p ./tsconfig.json -t 120000 tests/er-devnet.ts"